Route Origin Authorization
$ rpki-client -vvf rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa
File: 3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa (raw, json)
Hash identifier: +UkVpaO18ME5gMaikYZNLIhK4sXr+jHak8VatMkjmtA=
Subject key identifier: 7E:96:79:3A:C2:8A:9C:32:53:8B:EB:9D:2E:6D:E7:01:DB:43:08:E5
Certificate issuer: /CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Certificate serial: 1351ECACAFA7C13DEBFD14F2572B17A3B95EB056
Authority key identifier: 8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
Authority info access: rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject info access: rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa
Signing time: Fri 05 Apr 2024 00:27:25 +0000
ROA not before: Fri 05 Apr 2024 00:22:25 +0000
ROA not after: Fri 04 Apr 2025 00:27:25 +0000
asID: 265085
IP address blocks: 170.233.24.0/23 maxlen: 23
Validation: Failed, unable to get certificate CRL
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:51:ec:ac:af:a7:c1:3d:eb:fd:14:f2:57:2b:17:a3:b9:5e:b0:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8F68978AFBC97044175F7648CB33A2DB3E17A9DB
Validity
Not Before: Apr 5 00:22:25 2024 GMT
Not After : Apr 4 00:27:25 2025 GMT
Subject: CN=7E96793AC28A9C32538BEB9D2E6DE701DB4308E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c8:65:f5:23:a2:30:6d:05:c0:9f:27:01:7f:
16:f0:db:0c:71:af:5e:6f:96:81:d9:ea:96:98:ab:
b2:3b:d0:d9:5f:30:79:d6:ee:3f:ec:5d:cd:d8:46:
03:7f:c2:78:ff:ea:93:a9:f1:1a:7b:57:94:3f:ad:
d0:b6:97:c3:80:a3:ea:f2:ff:bd:4b:b6:21:aa:e4:
fe:82:24:fa:cd:4d:8b:4b:ff:65:b4:27:22:fc:d8:
7e:b3:30:84:dc:48:ee:84:68:bd:2c:2c:93:7e:e7:
c0:77:72:ca:f9:2d:3a:75:e2:eb:5d:00:cf:ec:52:
a0:3d:cd:95:94:16:85:47:27:cc:13:85:2e:5d:02:
61:8b:ab:67:7a:02:38:ef:56:10:f5:3d:34:67:25:
9e:e4:24:e7:a1:e6:62:6b:6f:37:33:f3:d4:0c:de:
e2:1e:61:e6:84:51:db:31:3e:c6:ee:00:ba:23:e7:
00:8b:62:73:e0:10:85:32:99:aa:92:c0:44:1e:bc:
4a:a8:3d:5d:38:0a:16:a1:ec:d5:aa:af:dc:54:c3:
35:d2:34:32:1e:d0:d9:38:be:83:89:4b:9d:43:08:
74:63:57:0b:08:7d:a2:8d:af:cb:40:6e:c9:bf:61:
59:b8:55:87:5e:75:01:cf:d2:c1:17:dc:36:5a:7c:
11:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:96:79:3A:C2:8A:9C:32:53:8B:EB:9D:2E:6D:E7:01:DB:43:08:E5
X509v3 Authority Key Identifier:
keyid:8F:68:97:8A:FB:C9:70:44:17:5F:76:48:CB:33:A2:DB:3E:17:A9:DB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8F68978AFBC97044175F7648CB33A2DB3E17A9DB.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JWsXGqApZ2dA4FXMQMMUNSdCZv9JKmGfCJcHXtezkBR/1/3137302e3233332e32342e302f32332d3233203d3e20323635303835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.233.24.0/23
Signature Algorithm: sha256WithRSAEncryption
85:a0:dc:d1:e5:46:3e:80:5f:a6:04:e6:cb:35:20:09:14:5d:
ac:0b:e5:a3:58:a4:86:b8:bf:bb:0b:4d:e8:46:6e:62:16:0e:
8c:07:7c:dc:b8:ef:12:04:0e:a8:8e:41:52:0f:e5:63:2b:67:
32:6b:ce:ed:05:92:d8:f7:8a:0b:20:46:ce:dd:6a:e9:24:e2:
2b:76:da:08:c6:52:e6:be:40:76:41:f3:be:79:3e:43:87:be:
7a:c8:d3:2b:a6:1c:31:ca:90:db:94:a8:44:e0:d5:43:2a:fa:
97:85:21:77:ed:f9:6b:0b:03:a7:45:92:eb:ca:4f:ac:b7:36:
39:55:26:5c:5f:78:0e:f4:14:ac:88:6b:84:60:b9:12:43:39:
d6:7e:15:dc:9e:f8:12:ec:27:90:36:78:b1:62:61:b2:ca:5a:
c2:bd:ca:0c:b8:09:51:23:db:a2:7e:65:3c:bc:65:6f:98:90:
c9:21:d0:7f:49:d1:27:56:3d:ae:46:ca:32:8c:34:b8:d7:a5:
26:f2:f6:0e:14:11:f5:85:94:0e:9e:4a:fc:0a:fe:65:93:10:
d9:fa:75:64:2a:a4:f7:d7:13:ff:4f:01:82:a1:6d:9c:64:eb:
59:56:21:05:d9:f7:41:dc:c6:32:82:8b:eb:2d:81:23:95:27:
16:17:c4:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 27 07:54:51 2024 by rpki-client on console-ams.rpki-client.org